Plex urges immediate update after undisclosed security vulnerabilities
The streaming platform emailed users to patch Plex Media Server and Plex Desktop before flaws are exploited, without yet disclosing details or CVE numbers.
What to know
- Plex has not disclosed technical details of the vulnerabilities or published CVE numbers, only confirming fixes exist in Media Server 1.43.3 and Desktop 1.115.0.
- Directly emailing customers about a specific vulnerability is unusual for Plex, signaling the issues are considered serious.
- Affected versions are Plex Media Server v1.43.2 and earlier; users on NAS devices may need to install updates manually since package managers may lag.
- Plex has a history of exploited flaws, including a 2020 RCE bug tied to the 2022 LastPass breach and a high-severity credential-theft flaw patched in August 2025.
“To manually update your Plex Server, go to our downloads page and download the most recent version.”
Plex, Company advisory · Forbes (via Yahoo News Canada) ↗ · Sep 2
Plex Media streaming and server software company
The record 10 articles and posts · last 30 days
- summary covers to here · Sep 3, 10:13 PM · 5 pieces above arrived after
What people are saying 4 voices from 2 sites · verbatim
- Sep 4
-
O
「Plexはユーザーに対し、セキュリティ上の脆弱性を直ちに修正するよう警告している。 」： # BLEEPINGCOMPUTER 「Plexは今週、複数のセキュリティ脆弱性を修正するため、デスクトップクライアントとメディアサーバーを直ちにアップデートするようユーザーに促した。 これらの脆弱性にはまだ追跡しやすいようにCVE IDが割り当てられておらず、Plexは 火曜日に 追加の詳細を提供しなかったものの、これらのセキュリティ問題はPlex Media Server v1.43.2以前のバージョンに影響を与えることが知られています。…
-
The LastPass hack (one of the many) was through a Plex client hole on a devops dev machine that had the vault master password.
- Sep 3
-
B
Plex urged users this week to update their desktop clients and media servers immediately to patch multiple security vulnerabilities. https://www. bleepingcomputer.com/news/secu rity/plex-warns-users-to-patch-security-vulnerabilities-immediately/
- Sep 2
-
A
For anyone # selfhosting a Plex server, you should update IMMEDIATELY as there's some important security fixes put in place in 1.43.3. Full post from the Plex team is here: https:// forums.plex.tv/t/important-sec urity-update-for-plex-media-server-v1-43-2-and-earlier/942319